!
version 12.2(37)SE1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname CS1
!
!
no profinet
!
!
ip dhcp excluded-address 192.11.10.1 192.11.10.50
ip dhcp excluded-address 192.11.10.150 192.11.10.254
ip dhcp excluded-address 192.11.11.1 192.11.11.50
ip dhcp excluded-address 192.11.11.150 192.11.11.254
ip dhcp excluded-address 192.11.12.1 192.11.12.50
ip dhcp excluded-address 192.11.12.150 192.11.12.254
ip dhcp excluded-address 192.11.13.1 192.11.13.50
ip dhcp excluded-address 192.11.13.150 192.11.13.254
ip dhcp excluded-address 192.11.14.1 192.11.14.50
ip dhcp excluded-address 192.11.14.150 192.11.14.254
ip dhcp excluded-address 192.11.15.1 192.11.15.50
ip dhcp excluded-address 192.11.15.150 192.11.15.254
ip dhcp excluded-address 192.11.16.1 192.11.16.50
ip dhcp excluded-address 192.11.16.150 192.11.16.254
ip dhcp excluded-address 192.11.17.1 192.11.17.50
ip dhcp excluded-address 192.11.17.150 192.11.17.254
ip dhcp excluded-address 192.11.18.1 192.11.18.50
ip dhcp excluded-address 192.11.18.150 192.11.18.254
ip dhcp excluded-address 192.11.19.1 192.11.19.50
ip dhcp excluded-address 192.11.19.150 192.11.19.254
ip dhcp excluded-address 10.11.20.1 10.11.20.50
ip dhcp excluded-address 10.11.20.150 10.11.20.254
ip dhcp excluded-address 192.11.30.1 192.11.30.50
ip dhcp excluded-address 192.11.30.150 192.11.30.254
ip dhcp excluded-address 192.11.40.1 192.11.40.50
ip dhcp excluded-address 192.11.40.150 192.11.40.254
ip dhcp excluded-address 172.11.99.1 172.11.99.200
ip dhcp excluded-address 172.11.99.211 172.11.99.254
!
ip dhcp pool B-V10
 network 192.11.10.0 255.255.255.0
 default-router 192.11.10.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V11
 network 192.11.11.0 255.255.255.0
 default-router 192.11.11.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V12
 network 192.11.12.0 255.255.255.0
 default-router 192.11.12.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V13
 network 192.11.13.0 255.255.255.0
 default-router 192.11.13.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V14
 network 192.11.14.0 255.255.255.0
 default-router 192.11.14.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V15
 network 192.11.15.0 255.255.255.0
 default-router 192.11.15.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V16
 network 192.11.16.0 255.255.255.0
 default-router 192.11.16.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V17
 network 192.11.17.0 255.255.255.0
 default-router 192.11.17.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V18
 network 192.11.18.0 255.255.255.0
 default-router 192.11.18.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V19
 network 192.11.19.0 255.255.255.0
 default-router 192.11.19.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V20
 network 10.11.20.0 255.255.255.0
 default-router 10.11.20.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V30
 network 192.11.30.0 255.255.255.0
 default-router 192.11.30.1
 dns-server 10.11.20.14
 domain-name bcompany.local
ip dhcp pool B-V40
 network 192.11.40.0 255.255.255.0
 default-router 192.11.40.1
 dns-server 8.8.8.8
 domain-name bcompany.local
ip dhcp pool B-AP-MGMT
 network 172.11.99.0 255.255.255.0
 default-router 172.11.99.1
 dns-server 10.11.20.14
!
!
ip routing
!
!
!
!
username netadmin privilege 15 secret 5 $1$mERr$X4oEyaJGpqWGSS7aufgl50
!
!
!
!
!
!
!
!
!
!
ip ssh version 2
ip domain-name bcompany.test
!
!
spanning-tree mode rapid-pvst
spanning-tree vlan 10-20 priority 4096
spanning-tree vlan 30,40,99 priority 8192
!
!
!
!
!
!
interface FastEthernet0/1
 description TO-FW1-VIA-TRANSIT
 no switchport
 ip address 172.11.33.10 255.255.255.248
 duplex auto
 speed auto
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
 description TRUNK-B-COMPANY
 switchport trunk allowed vlan 20,99
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface FastEthernet0/6
 switchport trunk native vlan 99
 switchport trunk allowed vlan 30,40,99
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
 description TRUNK-B-COMPANY
 switchport trunk allowed vlan 10-20,30,40,99
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface FastEthernet0/24
 description OSPF-PEER-CORE
 no switchport
 ip address 172.11.33.41 255.255.255.252
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description TRUNK-B-COMPANY
 switchport trunk allowed vlan 10-20,30,40,99
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet0/2
 description TRUNK-B-COMPANY
 switchport trunk allowed vlan 10-20,30,40,99
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan10
 description GENERAL
 mac-address 0000.0cad.ea01
 ip address 192.11.10.2 255.255.255.0
 standby 10 ip 192.11.10.1
 standby 10 priority 120
 standby 10 preempt
!
interface Vlan11
 description HR
 mac-address 0000.0cad.ea02
 ip address 192.11.11.2 255.255.255.0
 standby 11 ip 192.11.11.1
 standby 11 priority 120
 standby 11 preempt
!
interface Vlan12
 description FINANCE
 mac-address 0000.0cad.ea03
 ip address 192.11.12.2 255.255.255.0
 ip access-group FINANCE-IN in
 standby 12 ip 192.11.12.1
 standby 12 priority 120
 standby 12 preempt
!
interface Vlan13
 description PURCHASE
 mac-address 0000.0cad.ea04
 ip address 192.11.13.2 255.255.255.0
 standby 13 ip 192.11.13.1
 standby 13 priority 120
 standby 13 preempt
!
interface Vlan14
 description SALES
 mac-address 0000.0cad.ea05
 ip address 192.11.14.2 255.255.255.0
 standby 14 ip 192.11.14.1
 standby 14 priority 120
 standby 14 preempt
!
interface Vlan15
 description PRODUCTION
 mac-address 0000.0cad.ea06
 ip address 192.11.15.2 255.255.255.0
 standby 15 ip 192.11.15.1
 standby 15 priority 120
 standby 15 preempt
!
interface Vlan16
 description RD
 mac-address 0000.0cad.ea07
 ip address 192.11.16.2 255.255.255.0
 standby 16 ip 192.11.16.1
 standby 16 priority 120
 standby 16 preempt
!
interface Vlan17
 description QUALITY
 mac-address 0000.0cad.ea08
 ip address 192.11.17.2 255.255.255.0
 standby 17 ip 192.11.17.1
 standby 17 priority 120
 standby 17 preempt
!
interface Vlan18
 description SAFETY
 mac-address 0000.0cad.ea09
 ip address 192.11.18.2 255.255.255.0
 standby 18 ip 192.11.18.1
 standby 18 priority 120
 standby 18 preempt
!
interface Vlan19
 description IT
 mac-address 0000.0cad.ea0a
 ip address 192.11.19.2 255.255.255.0
 standby 19 ip 192.11.19.1
 standby 19 priority 120
 standby 19 preempt
!
interface Vlan20
 description SERVERS
 mac-address 0000.0cad.ea0b
 ip address 10.11.20.2 255.255.255.0
 standby 20 ip 10.11.20.1
 standby 20 priority 120
 standby 20 preempt
!
interface Vlan30
 description OFFICE-WIFI
 mac-address 0000.0cad.ea0c
 ip address 192.11.30.2 255.255.255.0
 standby 30 ip 192.11.30.1
 standby 30 preempt
!
interface Vlan40
 description GUEST
 mac-address 0000.0cad.ea0d
 ip address 192.11.40.2 255.255.255.0
 ip access-group GUEST-IN in
 standby 40 ip 192.11.40.1
 standby 40 preempt
!
interface Vlan99
 description MANAGEMENT
 mac-address 0000.0cad.ea0e
 ip address 172.11.99.11 255.255.255.0
 standby 99 ip 172.11.99.1
 standby 99 preempt
!
router ospf 1
 router-id 172.11.99.11
 log-adjacency-changes
 passive-interface default
 no passive-interface FastEthernet0/1
 no passive-interface FastEthernet0/24
 network 172.11.33.8 0.0.0.7 area 0
 network 172.11.33.40 0.0.0.3 area 0
 network 192.11.0.0 0.0.255.255 area 0
 network 10.11.20.0 0.0.0.255 area 0
 network 172.11.99.0 0.0.0.255 area 0
!
ip classless
!
ip flow-export version 9
!
!
ip access-list extended FINANCE-IN
 deny ip 192.11.12.0 0.0.0.255 192.11.16.0 0.0.0.255
 permit ip any any
ip access-list extended GUEST-IN
 permit udp any eq bootpc any eq bootps
 permit icmp 192.11.40.0 0.0.0.255 host 192.11.40.1
 deny ip 192.11.40.0 0.0.0.255 192.11.0.0 0.0.255.255
 deny ip 192.11.40.0 0.0.0.255 10.11.20.0 0.0.0.255
 deny ip 192.11.40.0 0.0.0.255 172.11.99.0 0.0.0.255
 permit ip any any
ip access-list standard MGMT-SSH
 permit host 172.11.99.50
 deny any
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 access-class MGMT-SSH in
 exec-timeout 5 0
 login local
 transport input ssh
!
!
!
!
end
